Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 28
Restablecer filtrospgAdmin 4: Improper restriction of excessive authentication attempts
pgAdmin 4 File Manager has symbolic-link path traversal
pgAdmin 4 has deserialization of untrusted data in its FileBackedSessionManager
pgAdmin 4 contains local file inclusion (LFI) and server-side request forgery (SSRF) vulnerabilities
pgAdmin 4: OS command injection vulnerability in Import/Export query export
pgAdmin 4: Stored cross-site scripting (XSS) vulnerability in Browser Tree and Explain Visualizer modules
pgadmin4 affected by a Restore restriction bypass via key disclosure vulnerability
pgAdmin 4 has command injection vulnerability on Windows systems
pgAdmin has vulnerability in LDAP authentication mechanism that allows bypassing TLS certificate verification
pgAdmin is affected by an LDAP injection vulnerability
pgadmin4 is affected by a Cross-Origin Opener Policy (COOP) vulnerability
pgAdmin has Incorrect Default Permissions
OAuth2 client ID and secret exposed through the web browser
pgAdmin Cross-site Scripting vulnerability in /settings/store API response json payload
pgAdmin is affected by a multi-factor authentication bypass vulnerability
pgAdmin Remote Code Execution (RCE) vulnerability
pgAdmin failed to properly control the server code
pgAdmin 4 vulnerable to directory traversal
pgAdmin 4 Open Redirect vulnerability
pgadmin4 vulnerable to Code Injection
pgAdmin 4 Path Traversal vulnerability
pgAdmin 4 server mode has an authorization vulnerability affecting Server Groups, Servers, Shared Servers, Background Processes, and Debugger modules
pgadmin4 has a Meta-Command Filter Command Execution
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.